CVE-2018-16466

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by…

hackerone·CWE-284·Published 2018-10-30

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

151 chars

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

NVDen

151 chars

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

NVDes

193 chars

La revalidación incorrecta de permisos en Nextcloud Server en versiones anteriores a la 14.0.0, 13.0.6 y 12.0.11 conduce a que no se acepten las restricciones de acceso de los tokens de acceso.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.5	8.0	4.9	AV:N/AC:L/Au:S/C:P/I:P/A:N
3.0	Primary	NVD	8.1	2.8	5.2	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N